This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: 2UJRzvbsJUdeEo139QuIDMviTdbmhXYD3/UHixGakJk= Subject key identifier: BB:A0:6C:27:FC:CC:0E:C3:2B:78:19:9C:31:DD:88:CC:C6:2A:B7:A1 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 34F6 Signing time: Sat 20 Dec 2025 14:33:15 +0000 Manifest this update: Sat 20 Dec 2025 14:33:15 +0000 Manifest next update: Sat 27 Dec 2025 14:33:15 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: qORn91+9oZz6rUKu3n7ZqZqpWH93v+eP+KzII8TlDRw=) 2: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: APLkO/9VQDMo8Mg1BILGpzlcs8IiIyqCJfnR8QGrWEA=) 3: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: RA6RFmE6k5HO1bBqRafgilu2yoyhiNE9rjZysYl9t3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Dec 20 14:33:15 2025 GMT Not After : Dec 27 14:33:15 2025 GMT Subject: CN=6946b3ab-3ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:4e:15:2f:39:6f:a7:17:14:85:fd:39:be: 79:94:ec:41:aa:23:ef:38:77:30:fe:93:f0:7e:d0: 90:bb:d0:aa:df:d6:4d:dd:4a:ba:5e:ec:4c:d9:cd: 7f:b9:08:ca:54:f4:2e:b6:5b:78:54:cf:1a:53:80: 0e:87:d0:f8:86:e6:98:b0:9e:d6:7c:c7:f4:5f:00: 78:ed:17:b3:98:d2:7d:a9:97:37:26:90:43:95:7e: 6c:12:36:7c:1f:f2:2f:65:e1:a2:2a:14:fb:2b:97: 72:12:64:b3:2b:6b:e3:a2:91:42:da:7f:95:cf:dd: a8:a2:b1:82:07:7f:bc:bb:0a:0b:5b:8a:11:3f:fc: 30:d3:4a:ea:4f:bd:1d:8e:86:0b:9b:52:5b:0a:92: d4:0f:9d:9b:e1:52:d7:36:6f:ed:81:2e:01:c5:d2: 70:42:78:8e:25:b0:34:17:61:90:60:b7:d6:89:b2: 61:ae:66:4c:13:63:6d:d9:40:25:c3:80:36:36:c2: b0:1c:42:f3:c0:37:8e:55:3c:80:b1:b5:dc:4f:1d: 8b:79:5b:28:00:56:5a:d3:80:06:7d:b5:7c:48:00: 96:4e:28:87:d4:44:51:e7:04:e4:7e:85:a9:9a:8a: ff:f2:10:34:6f:6b:84:93:47:87:51:60:48:03:c5: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A0:6C:27:FC:CC:0E:C3:2B:78:19:9C:31:DD:88:CC:C6:2A:B7:A1 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:91:21:d8:26:f9:dd:c9:65:94:de:bd:d0:df:78:bd:1e:df: b7:29:39:42:2e:34:ed:f8:10:5d:68:f2:b0:33:08:0a:e8:1b: 43:20:46:5d:c5:5e:12:01:a4:1a:5e:b9:93:ee:d7:02:bf:03: c5:ef:6d:95:46:a9:ba:85:1f:ae:79:e7:68:d3:c7:c8:73:f3: da:c7:7e:8b:73:e2:bb:76:01:db:a1:2f:30:4f:37:35:fe:b4: 78:1a:b9:da:0d:e3:90:b6:2b:56:f1:3c:03:6c:c3:b6:96:c6: b7:c0:5e:d4:c9:e5:53:02:ea:87:99:d0:f7:5b:21:72:68:10: 12:15:69:09:ed:a5:b0:ad:5f:0e:ce:d8:dc:3a:36:1d:c5:ac: 1c:b5:cc:2c:6a:bd:f3:a0:e4:d7:66:8b:e9:9c:91:a3:6f:a7: 3b:59:55:0d:b5:e9:13:6f:37:83:e9:ce:99:5d:77:63:f7:e0: 63:32:05:93:c2:0a:76:cc:a5:0a:d2:cf:f9:ce:0d:17:37:1d: e9:0c:53:c7:80:d2:60:8c:5b:a1:55:75:b6:ec:6b:ec:42:45: 2a:db:3b:ba:4b:93:03:7c:8f:1b:87:71:2b:08:18:70:44:ec: cb:8b:85:3e:2f:5e:e3:45:d3:44:44:41:91:d5:2e:ee:b6:e0: 0f:2b:84:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUxMjIwMTQzMzE1WhcNMjUxMjI3MTQzMzE1WjAYMRYwFAYD VQQDDA02OTQ2YjNhYi0zY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqdOFS85b6cXFIX9Ob55lOxBqiPvOHcw/pPwftCQu9Cq39ZN3Uq6XuxM2c1/ uQjKVPQutlt4VM8aU4AOh9D4huaYsJ7WfMf0XwB47RezmNJ9qZc3JpBDlX5sEjZ8 H/IvZeGiKhT7K5dyEmSzK2vjopFC2n+Vz92oorGCB3+8uwoLW4oRP/ww00rqT70d joYLm1JbCpLUD52b4VLXNm/tgS4BxdJwQniOJbA0F2GQYLfWibJhrmZME2Nt2UAl w4A2NsKwHELzwDeOVTyAsbXcTx2LeVsoAFZa04AGfbV8SACWTiiH1ERR5wTkfoWp mor/8hA0b2uEk0eHUWBIA8UrYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLugbCf8 zA7DK3gZnDHdiMzGKrehMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1kSHYJvndyWWU3r3Q33i9Ht+3KTlCLjTt+BBdaPKwMwgK6BtDIEZd xV4SAaQaXrmT7tcCvwPF722VRqm6hR+ueedo08fIc/Pax36Lc+K7dgHboS8wTzc1 /rR4GrnaDeOQtitW8TwDbMO2lsa3wF7UyeVTAuqHmdD3WyFyaBASFWkJ7aWwrV8O ztjcOjYdxawctcwsar3zoOTXZovpnJGjb6c7WVUNtekTbzeD6c6ZXXdj9+BjMgWT wgp2zKUK0s/5zg0XNx3pDFPHgNJgjFuhVXW27GvsQkUq2zu6S5MDfI8bh3ErCBhw ROzLi4U+L17jRdNEREGR1S7utuAPK4RN -----END CERTIFICATE-----Generated at Mon Dec 22 00:52:51 2025 by rpki-client